Cyber Breaches

Dark Web News Analysis The dark web news reports a potential metadata leak involving an entity identified as Al-Rahden. Unlike typical database leaks involving user data, this incident specifically mentions the exposure of information from the information_schema database, namely the COLLATIONS and PLUGINS tables. The leak provides attackers with technical ...

Dark Web News Analysis The dark web news describes the alleged sale of a database purportedly originating from TrudVsem.ru, a major Russian government-operated employment portal (“Work in Russia”). The sale is advertised on a hacker forum. The database reportedly contains 8 million lines (records) from a single table and includes ...

Dark Web News Analysis The dark web news reports a potential data leak involving sromsg.ru, identified as a Russian website. A database allegedly belonging to the site has been leaked (made publicly available or widely shared) on a hacker forum. The data, shared in CSV format, reportedly includes sensitive user ...

Dark Web News Analysis A threat actor is advertising the alleged sale of a ZoomInfo database on a hacker forum. ZoomInfo is a major B2B database provider, offering extensive information on businesses and professionals for sales, marketing, and recruiting purposes. The seller provides sample data showcasing the types of information ...

Vulnerability Analysis A new post-exploitation technique, demonstrates how threat actors with local access to a victim’s Windows machine can systematically extract and decrypt authentication tokens for Microsoft Teams. This attack successfully bypasses recent security hardening introduced after the 2022 Vectra AI disclosure of plaintext token storage, granting attackers powerful impersonation ...

Dark Web News Analysis The dark web news describes a potential data leak involving LKMFLOT, identified as a Russian entity associated with the domain lkmflot.ru. Searching online suggests LKMFLOT might be involved in fleet management, logistics, or transport services, possibly marine or river-related given “flot” means fleet in Russian. A ...

Dark Web News Analysis A threat actor has posted an announcement on a prominent hacker forum actively seeking individuals who possess knowledge of exploitable vulnerabilities within major payment systems: QuickBooks, Link (by Stripe?), and Stripe. The specific, stated goal is highly concerning: This is not a sale of existing data ...

Dark Web News Analysis The dark web news describes a potential catastrophic data breach involving Indonesia’s Directorate General of Population and Civil Registration (Dukcapil Kemendagri), the core agency responsible for managing citizen identity data. A threat actor has allegedly leaked a database containing sensitive personal data belonging to approximately 90 ...

Dark Web News Analysis A threat actor has posted on a prominent hacker forum detailing their unauthorized access to a FinTech company. The initial compromise was achieved via VPN access. While exploring the internal network, the attacker discovered access to the company’s Amazon S3 storage buckets. Crucially, the attacker notes: ...